General

  • Target

    80eced8a5d96ff024ef328e4d1fb52881fe706fb2d1244fdc08929a867ff44c8

  • Size

    277KB

  • Sample

    241006-dj6lma1cnp

  • MD5

    31c59d7db4909f2c013c0bb9f13e946c

  • SHA1

    fa194250e7c298a792a91ea798c1b683cd7969e2

  • SHA256

    80eced8a5d96ff024ef328e4d1fb52881fe706fb2d1244fdc08929a867ff44c8

  • SHA512

    243e6ea1b9b6614cd14d6f54c1694b39a20d1164b8152ecea8cc0c117141cd5aa07f948ef86d59063c235bd3eb20f674532dd0821290103171870496fa83d815

  • SSDEEP

    6144:AA/l/DRfkBQC3dM7B+mCGBV+UdvrEFp7hK6h:AA/lbRfkB16B+mCGBjvrEH7bh

Malware Config

Targets

    • Target

      80eced8a5d96ff024ef328e4d1fb52881fe706fb2d1244fdc08929a867ff44c8

    • Size

      277KB

    • MD5

      31c59d7db4909f2c013c0bb9f13e946c

    • SHA1

      fa194250e7c298a792a91ea798c1b683cd7969e2

    • SHA256

      80eced8a5d96ff024ef328e4d1fb52881fe706fb2d1244fdc08929a867ff44c8

    • SHA512

      243e6ea1b9b6614cd14d6f54c1694b39a20d1164b8152ecea8cc0c117141cd5aa07f948ef86d59063c235bd3eb20f674532dd0821290103171870496fa83d815

    • SSDEEP

      6144:AA/l/DRfkBQC3dM7B+mCGBV+UdvrEFp7hK6h:AA/lbRfkB16B+mCGBjvrEH7bh

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks